Don’t forget to verify your server’s security. You can use WPScan to test your WordPress installation and fail2ban to ban dangerous IP addresses. Make sure you get no red warnings on WPScan and :
fail2ban.service – Fail2Ban Service
Active: active (running)